Lucene search
GoogleOSV:GHSA-4RM3-4MQ4-MFWRHistoryJan 04, 2019 - 5:43 p.m.
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
2019-01-0417:43:22
Google
osv.dev
11
EPSS
0.002
Percentile
53.3%
A CSRF issue was discovered in web/authorization/oauth2/controller/OAuth2ClientController.java in hsweb 3.0.4 because the state parameter in the request is not compared with the state parameter in the session after user authentication is successful.
Related
cve
cve
CVE-2018-20595
2018-12-30 18:29:00
osv
osv
CVE-2018-20595
2018-12-30 18:29:00
cvelist
cvelist
CVE-2018-20595
2018-12-30 18:00:00
github
github
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
2019-01-04 17:43:22
nvd
nvd
CVE-2018-20595
2018-12-30 18:29:00
prion
prion
Cross site request forgery (csrf)
2018-12-30 18:29:00
veracode
veracode
Cross Site Request Forgery (CSRF)
2018-12-31 09:01:59